Auditing Informix database connections
February 16, 2016 1 Comment
By Inge Halilovic, IBM Analytics Platform
Preserving integrity of information and managing compliance control across heterogeneous environments is becoming increasingly critical. IBM Security Guardium has worked with Informix for many years now and with Informix 12.10.xc6, you have increased capabilities when you audit the user actions for your Informix database server with IBM Security Guardium, version 10.0. Guardium prevents leaks from databases, ensures the integrity of information, and automates compliance controls across heterogeneous environments.
Guardium can now:
- Mask sensitive data in Informix databases.
- Audit, and close, any Informix connection (if necessary,), regardless of the connection protocol. Previously, Guardium audited and closed only TCP connections.
On the Informix side, you use the new ifxguard utility to monitor connections that are audited by Guardium. Every time a user session attempts an action that is auditable, an ifxguard agent contacts the Guardium server. The Guardium server audits the connection and takes any appropriate action. You can customize the behavior of the ifxguard utility:
- Set the logging mode
- Set the number of ifxguard worker threads to prevent heavy locking
You can enable auditing and set the actions of the database server if the Guardium server does not respond in the timeout period by setting the new IFXGUARD configuration parameter in the onconfig file. For example, if the timeout period is exceeded, the Informix server can allow the client connection without auditing, trigger an alarm, disable auditing altogether, or shut down.
The 2016 IIUG conference will include sessions by experts that cover this topic in greater detail. If you are interested in learning more you can Register for the conference and attend the session on auditing with IBM Security Guardium to find out how to configure auditing for your Informix database server.
The conference will be held from May 4th – 8th at the Sawgrass Marriott Golf Resort & Spa, Ponte Vedra Beach, Florida, USA. The good news is that IIUG members get Flat $100 off on the registration fees. You can register here – http://bit.ly/iiug2016reg.